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(54) Document management method and apparatus, and recording medium therefor 



(57) The seal mark information that system manag- 
er 100 encoded with the cryptographic key that seal 
mark management equipment 101 manages according 
to a requirement of employee 110 is embedded in the 
mark of seal image design that employee 110 created 
and transmitted. 

A public key being necessary for decoding is at- 
tached to a seal mark or distributed to outside system 
manager 100N associated with employee terminal 111 
inside company in advance 

Because the received side can be confirmed if it is 
embedded in a seal mark with a public key distributed 
in advance or a public key attached to a seal mark, doc- 
ument certification, an original and validity can be con- 
trolled, and can be confirmed on the network. 
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Description 

[0001] The present invention relates to a certification 
method and apparatus to certificate original of docu- 
ment and validity of document by an electronic seal, and 
a storage medium storing a document management 
program that realizes the method and the apparatus. 
[0002] At present the data circulated on the network 
is increasing, it becomes important that the technique 
that can confirm the truth of data on the network. Fol- 
lowing spread of groupware, while an approval person 
reproduces data which was approved and circulates da- 
ta which was approved in a network, chances that a 
reading person during circulation is reproducing for an 
individual have increased. 

[0003] And, following an increase of a commercial 
transaction on the network, the role of a receipt as for 
data becomes necessary to certify payment at the time 
of a settlement ol account. 

As lor data, a means (or being necessary to reproduce 
by a specified number and being impossible to be falsi- 
fied, becomes necessary like carbon copy used with a 
conventional paper. 

Confirmation of a halfway falsification ol data is conduct- 
ed by a digital signature in EC that uses an internet, In 
SET that is used to do a credit settlement of account 
safely, a card proprietor is being certified by a digital sig- 
nature. 

Digital signature is a cryptography which is encoded 
compressed sentences that are compressed informa- 
tion to be communicated with a sender's cryptograph 
key, and the digital signature can be decoded by a re- 
ceiver's decoding or public key. 
That is, a receiver can confirm that a message is not 
falsified by comparing compressed sentences from re- 
ceived message with decoded compression sentences 
from digital signature. 

[0004] On the other hand, the general meaning of the 
seal and the signature covers both confirmation of an 
original and document certification. As an example of a 
technique that solves above problems, a method of pre- 
venting a falsification of documents also is developed 
by adding a seal or a signature to the documents and 
the deformation of the seal and signature in accordance 
with the characteristic value of the document is enable 
to certificate the document as shown in Japanese patent 
Laid-open No. 10-11509 (It is called prior art 1 thereaf- 
ter) 

And a method of confirming an original and a reproduc- 
tion of present documents by using an ID card and a 
copy machine also is developed as shown in Japanese 
patent Laid-open print No. 6-176036 (It is called prior 
art 2 thereafter) . 

[0005] A digital signature have both functions of cer- 
tification of documents and validity of data, however a 
person who receives the digital signature can not con- 
firm the justification or validity of information after having 
seen the received data. 



In an actual world, a registered seal gives us relief feel- 
ing because it is visible, however a digital signature does 
not have such a visible characteristic. 
[0006] On the other hand, while a conventional elec- 

5 tronic seal system uses the seal image that is visible, 
the seal image itself was mere design, and when data 
with an electronic seal was reproduced, it was difficult 
to distinguish an original and a reproduction. 
For example, it is necessary to take synchronism be- 

to tween an original and a reproduction, and to manage 
validity and an invalidity when original or reproduction 
has its value and approval to seal image is valuable such 
as a census registration card, or a register, etc 
However, it was impossible to take synchronism be- 

'5 tween the original of data and a reproduction and to 
manage validity and an invalidity in the conventional 
electronic seal system. 

[0007] That is, there was not a valid means when it is 
necessary to guarantee the genuineness and the origi- 
20 nal of data, and when the data is reproduced, and when 
limiting the number of reproduction data, and when a 
user optionally determine whether user reproduces or 
not. 

[0008] And : in prior art 1 , the seal image itself is also 

2S mere design data, and it is necessary to compare the 
seal image that is standardized on the server with the 
seal image that is formed by the feature quantity of doc- 
uments for document certification. 
That is to say, document certification by on-line in the 

30 specific intranet can be done, however receiver who re- 
ceives data can not certificate documents by displayed 
data when transferring a data on a network between cor- 
porations such as an extranet etc 
And, there was no electronic seal system with a function 

35 that the original and validity can be restricted and can 
be confirmed on the displayed data. 
In prior art 2 providing a means of certifying an original 
and a reproduction of a hard copy in the copy machine, 
however the original and the validity of data could not 

40 be confirmed. 

[0009] The purpose of the present invention is to pro- 
vide an electronic seal reproduction management sys- 
tem that can guarantee the genuineness of data in the 
visible seal image that is, can confirm the genuineness 

45 of data and can control and confirm an original and va- 
lidity. 

[0010] To resolve above problems, in the present in- 
vention, 

A document management apparatus comprising 
50 At least one terminal, 

At least mark management apparatus for manag- 
ing a mark which has visually identified characteristic 
and self-certification? Means used in the terminal, 

55 wherein said one terminal and said mark manage- 
ment apparatus are coupled with each other 
through a communication network, 
wherein said mark management apparatus com- 
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prising 

mark management data base which is necessary 
for an original and validity of data used in said ter- 
minal, 

combining means embedding encrypted informa- 
tion to confirm an onginal and validity by encrypt key 
that is managed in said mark management appara- 
tus into said mark in responsive to request from said 
terminal attaching public r.ey with said mark, dis- 
tributing said public key tosaid terminal or said mark 
management apparatus, 

said terminal comprising mark obtain means for ob- 
taining said mark in which information to confirm an 
original and validity is embedded when sealing seat 
mark generated in said mark management appara- 
tus, reproducing said seal mark, invalidating said 
seal mark, 

means for generating a mark to confirm an original 
and validity of data and comprising document cer- 
tification means, sealing said mark on said data by 
encrypting confirming information that generated 
data is not falsified by secret key set in said terminal, 
embedding said encrypted information into said 
mark, attaching public key, 

means for confirming an original of data and validity 
of data and certifying said document using said 
mark. 

[0011] In the drawings: 

[0012] Figure 1 illustrates the outline structure of an 
electronic seal reproduction management system to 
which embodiment of the present invention is applied. 
[0013] Figure 2 illustrates the hardware structure of 
the seal mark management equipment that is shown in 
Fig. 1. 

[0014] Figure 3 illustrates the hardware structure of 

the employee terminal that is shown in Fig. 1. 

[0015] Figure 4 shows the data example of seal mark 

management DB that is shown in Fig. 2. 

[0016] Figure 5 shows the data example of seal mark 

sealing management DB that is shown in Fig. 2. 

[0017] Figure 6 shows the data example of seal mark 

reproduction management DB that is shown in Fig. 2. 

[001 8] Figure 7 shows the example of image of a seal 

mark 

[0019] Figure 8 explains a function for embedding 
necessary information to seal for document confirma- 
tion of the data / reproduce / invalidate / confirm in seal 
mark on the employee terminal that is shown in Fig. 1, 
and initial screen image of the interface. 
[0020] Figure 9 is an image figure to explain process- 
ing of a seal mark sealing system. 
[0021] Figure 10 is a figure to explain processing of a 
seal mark sealing system. 

[0022] Figure 11 is an image figure to explain process- 
ing of a seal mark reproduction system. 
[0023] Figure 12 is a figure lo explain processing of a 
seal mark reproduction system. 



[0024] Figure 13 is an image figure to explain 
processing of a seal mark invalidity system. 
[0025] Figure 1 4 is a figure to explain processing of a 
seal mark invalidity system. 
s [0026] Figure 1 5 is a figure to explain processing of a 
seal mark confirmation system. 
[0027] Figure 1 6 is a figure to explain processing of a 
seal mark confirmation system. 
As follows, an example of a present invention implemen- 
ts tation form is explained by using a drawing. 

The details of a present invention are explained here by 
using the example of the electronic seal reproduction 
management system in the network between a compa- 
ny intranet and network between companies. 
15 And, the same number in the drawings that are ex- 
plained in the followings represents the same parts and 
an element. 

And that does not limit to the present invention. 
[0028] Fig. 1 illustrates the outline structure of the 
20 electronic seal reproduction management system of the 
present invention. 

The electronic seal reproduction management system 
of the present embodiment is a system which a system 
manager who manages a seal mark 1 0 0 1 — 1 0 0 n 

25 ( W e will call them system manager 100 thereafter), and 
an employee 1 1 0 1 — 1 1 0 n (we will call them em- 
ployee 110 thereafter) use, and as shown in Fig. 1 , seal 
mark management equipment 1011 (we will call it seal 
mark management equipment 101 thereafter), and em- 

30 ployee terminal 1111 are coupled with each other 
through communication network 1201 (we will call it 
communication network 120 thereafter) 
The same system or the terminal such as other compa- 
ny are coupled with the electronic seal reproduction 

3$ management system. 

The seal mark here means visible image data, and it has 
functions to confirm an original or validity of data, certify 
whether data was falsified or not (We will call it docu- 
ment certification thereafter), and confirm whether it was 

40 reproduced or not, and the seal mark shows a mark 
which has shape of image design such as a seal, or sig- 
nature image . 

[0029] Seal mark management equipment 101 is a 
server which system manager 100 manages, the server 

is controls and confirms of an original and validity, and cer- 
tify document between the company intranet and net- 
work transactions among companies. 
Seal mark management equipment 101 creates a seal 
mark in according to a requirement of employee 110, 

so the seal mark being embedded information being nec- 
essary to confirm original, and register seal mark to seal 
mark management DB209 and seal mark sealing man- 
agement DB 210 and seal reproduction management 
DB211 as we will mention later. 

55 [0030] Employee terminal 111 is the terminal that em- 
ployee 110 uses. 

Employee 110 creates documents, etc. that are neces- 
sary for a business using employee terminal 111, and 
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employee 110 exchanges data with system manager 
100. 

The seal mark ot every Individual is managed on em- 
ployee terminal 111, etc.. When changing information 
such as belonging etc, system manager 100 renews a 
seal mark, and sends renewed seal mark to employee 
terminal 111. Screen image 112 is an example of screen 
image when the data with a seal mark is indicated, and 
it shows a figure in which data, that is a part design draw- 
ing of the first edition and the second edition, is created. 
[0031] Fig. 2 illustrates the hardware structure of seal 
mark management equipment 101. 
The hardware structure of the seal mark management 
equipment 101 of the present embodiment includes dis- 
play unit 201 , input unit 202, communication network in- 
terface 203, seal mark management DB interface 204, 
seal mark log management DB interface 205, memory 
unit 206, CPU 207, and temporary memory unit 208, are 
coupled between them through bus 200 as shown in Fig. 
2. 

And, as an external storage, seal mark management 
DB209 and seal mark reproduction management 
DB210 are coupled to the seal mark management 
equipment 101. 

[0032] Display unit 201 is used to display a message, 
etc. for a system manager 100 using seal mark man- 
agement equipment 101, and display unit 201 compris- 
es CRT, and a liquid crystal display, etc.. 
[0033] Input unit 202 is used so that system manager 
100 using seal mark management equipment 101 inputs 
data, and an instruction, etc., and input unit 202 com- 
prises a keyboard, and a mouse, etc. 
[0034] Communication network interface 203 is an in- 
terface to exchange data with employee terminal 111 
and the seal mark management equipment 101 N etc. of 
other company through communication network 120. 
[0035] The seal mark management DB interface 204 
is an interface to exchange data with the seal mark seal- 
ing management DB 209. 

[0036] The seal mark sealing management DB 209 
manages by associating data such as an employee ID, 
seal ID, and a seal image, etc. 
An example of the seal mark management DB 209 is 
shown in Fig. 4. 

[0037] And, when sealing data, the seal mark man- 
agement program exchange data with a seal sealing 
DB210. 

The seal mark sealing management DB 210 manages 
by associating data such as an seal ID, Serial No., cre- 
ation date, reproduction acceptability flag, reproduction 
flag, invalidity flag, file name, terminal ID, and data char- 
acteristic. 

An example of the seal mark sealing management DB 
210 is shown in Fig. 5, 

[0038] The seal mark reproduction management in- 
terface 205 is an interface to exchange data with the 
seal mark reproduction management DB211. The seal 
mark reproduction management DB211 manages by as- 



sociating data used when reproducing seal mark in an 
employee terminal 111N,the data is like a high-ranking 
seal total NO, Serial NO, the reproduction date, or re- 
production employee ID. 
5 An example of the seal mark reproduction management 
DB211 is shown in Fig. 6. 

The memory unit 206 is used to permanently memorize 
the program and the data that are used with seal mark 
management equipment 101, etc. 
The memory unit 206 comprises a hard disk, and a flop- 
py disk, etc. 

[0039] CPU 207 controls each part that is included in 
the seal mark management equipment 101, and CPU 

207 executes various operation processing. 
[0040] Operating system 208A (We will call it OS208A 
thereafter), seal mark management program 208B, and 
seal mark reproduction management program 208C 
which are necessary for CPU to execute above opera- 
tion are stored temporary in memory 208. 
These programs are stored in a storage medium such 
as an CD-ROM and it is provided. 
The programs are stored in a hard disk at the time of 
installing this system, and they are stored to memory 

208 at the time of starting an information processing ma- 
chine. 

[0041] OS208A is a program to realize a function such 
as a file management, process management or device 
management to control the seal mark management 
equipment 101 as a whole. 

[0042] True positive confirmation program 208D real- 
izes the seal mark management program 208B and seal 
mark reproduction management program 208C on con- 
dition of a method of confirming whether a seal mark is 
true or not as shown in patent application No. 9-348860, 
and the method of confirming whether data on which 
seal mark is sealed is true or not. 
The seal mark management program 208B executes a 
processing of referring seal mark management DB 209, 
a processing of registering / renewing seal mark sealing 
management DB 210, a processing of specific informa- 
tion in a seal mark, and a processing of sending a seal 
mark to the terminal which requests the seal mark in 
case of receiving sealing request from employee termi- 
nal 111. 

[0043] In the case ol data already registered in the 
seal mark management DB, a system manager 100 in- 
structs a processing of registering / renewing data in 
seal mark management DB 209, however an employee 
110 also can instruct it. 

[0044] The technique in which specific information is 
embedded in the image data is known as an digital wa- 
termark. 

The technique of a digital watermark is stated at 1 00 - 
107 pages in Nikkei Electronics Vol 683, 1997. 
There is a invisible digital watermark so that human eyes 
can detect information embedded, and there is another 
visible digital watermark so that human eyes can detect 
information, and it is said that there is a limit in the in- 
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formation quantity that is embedded in case of the invis- 
ible digital watermark. 

In the case of seal mark, there is no trouble happening 
although the design of the seal mark is slightly changed 
as far as the symbolic meaning that the seal image in- 
dicates is not changed, that is, as far as we can under- 
stand what the mark indicates. 
Therefore combined a visible digital watermark and an 
invisible digital watermark as shown in Fig. 7 can let to 
some extent many information be embedded. 
[0045] And, the seal mark management program ex- 
ecutes a process of renewing the seal mark sealing 
management DB 210, and the seal mark reproduction 
management DB 211 in case there is a seal mark inva- 
lidity processing requirement from employee terminal 
111. 

The seal mark reproduction management program reg- 
isters / renews the seal mark sealing management DB 
210, and seal mark reproduction management DB 211 
in case that there is a seal mark reproduction require- 
ment from employee terminal 111. 
[0046] And the seal mark reproduction management 
program executes a process of referring to the seal mark 
sealing management DB210 and seal mark reproduc- 
tion DB 21 1 in case there is a document information con- 
firmation requirement from the employee terminal 111. 
[0047] Fig. 3 is a diagram showing hardware structure 
of employee terminal 111 . 

[0048] The hardware structure of employee terminal 
1 11 of the present embodiment as shown in Fig. 3, com- 
prises that a display unit 301, input unit 302, communi- 
cation network interface 303, memory unit 304, central 
processing unit (CPU) 305 and temporary memory 306 
are coupled to each other by bus 300. 
And in case the design of a seal used in the conventional 
actual world as seal image design is used : image scan- 
ner 307 is connected to the employee terminal 111, and 
design which a user wishes to use can be read and can 
be edited in the bit map, etc.. 

The display unit 301 is used to display a message, etc. 
for an employee 110 who uses employee terminal 111, 
and the display unit 301 comprises a CRT, and a liquid 
crystal display, etc.. 

[0049] Input unit 302 is used so that an employee 1 1 0 
who uses employee terminal 111 can input data, or an 
instruction, etc., and the input unit 301 comprises a key- 
board, and the mouse, etc.. 

[0050] Communication network interlace 303 is an in- 
terface to exchange data with seal mark management 
equipment 101, and an employee terminal 11 1N so on 
through communication network 120. 
[0051] Memory 304 is used to permanently memorize 
the program and the data that are used on employee 
terminal 111, etc., and the memory 304 comprises a 
hard disk, and a floppy disk, etc.. 
[0052] CPU 305 controls each part that constitutes 
employee terminaMU and executes various operation 
processing. 
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Necessary programs for CPU 306 to execute above 
processings such as OS306A, groupware system 306B, 
seal mark processing program 306C, and seal mark in- 
formation memory 306D are stored in the memory 306. 
5 [0053] OS306A is a program to realize a function such 
as a file management, process management or device 
management to control an employee terminal 111 as a 
whole. 

Groupware system etc. 306B is such a system that em- 
10 ployee terminal 111 exchange data with both inside the 
company and outside the company, and display neces- 
sary data, and the groupware system 306B has an in- 
terface with the seal mark processing program 306C to 
deal with the certification information that is sealed on 
is data. 

And, as for the system of this 306B, if it is the application 
system that handles data, even what thing is fine, and 
it is not limited to a groupware system especially. 
And seal mark processing program 306C can be run di- 
20 rectly on OS as an individual application system. 

[0054] Seal mark processing program 306C is a pro- 
gram to execute a processing of seal mark sealing, a 
processing of seal mark reproduction, a processing of 
seal mark invalidity and a processing of document cer- 
2S tification on employee terminal 111. 

Seal mark sealing processing is a processing so that an 
employee 110 seal an electronic seal on data with em- 
ployee terminal 111. 

The seal mark sealing processing comprises a process- 
30 jng of inputting seal mark corresponding to the employ- 
ee ID, 

a processing of embedding encrypted information 
with each secret key in a specific block ol seal mark, 

35 wherein the embedded information areselected 
document characteristic quantity information and 
sealing information such as seal serial No, and 
a processing of sealing a seal mark on a position 
that the document set. Seal mark reproduction 

40 processing is the processing that an employee 110 
creates data reproduction from original data on 
which an electronic seal is sealed with employee 
terminal 111, and the seal mark reproduction 
processing is the processing to display necessary 

45 data, and to decrypt embedded data by attached 
public key with the seal mark. 

[0055] And Seal mark reproduction processing com- 
prises confirming whether document is not falsified or 
so not, reproducing data and seal mark in condition of con- 
firming data validity and reproduction acceptability, add- 
ing reproduced seal mark to information indicating re- 
production, encrypting the seal mark with a secret key, 
and embedding the encrypted data in a specific block of 
55 the seal mark, attaching a public key, and sealing the 
seal mark in the position that the document set. 
[0056] Seal mark invalidity processing is the process- 
ing that an employee 110 executes a processing of in- 
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validating data on which an electronic seal is sealed with 
the employee terminal 111, and the seal mark invalidity 
processing comprises a processing of displaying nec- 
essary data, and decrypting embedded data using a 
public key attached with the seal mark. 
[0057] And confirming certified document information 
and data original to decrypted data, adding information 
indicating invalidity of seal mark, encrypting with its own 
secret key, embedding encrypted data in a specific block 
of seal mark, attaching a public key, and sealing in a 
position that the document set. 

[0058] Document certification processing is the pro- 
gram so that employee 110 confirm the contents of a 
seal mark. 

The processing comprises displaying necessary data, 
decoding information embedded with the public key at- 
tached to a seal mark, 

sending request to confirm toward seal mark manage- 
ment equipment 101 based on embedded data in the 
seal mark, and displaying an original and validity. 
[0059] Seal mark information memory 306D is the 
memory in which a seal mark and a public key, that are 
outputted using seal mark processing program 306C on 
employee terminal 111, are temporarily stored 
[0060] And the public key can be sent to employee 
terminal 111 with FD orthrough the network in advance 
and the method of sending a public key and the storage 
method are not limited 

[0061] Fig. 4 is the data example of seal mark man- 
agement DB209. 

Employee ID 401 , seal ID 402, name 403, mail address 
404, information 405 indicating a belonging and a posi- 
tion, and seal image 406, etc. are stored on the basis of 
a constant description standard. 
When registering a new seal mark and changing the in- 
formation indicating a belonging and position of an ex- 
isting seal mark, seal mark management DB209 is re- 
newed. 

[0062] Fig. 5 is the data example of seal mark sealing 
management DB210. 

Seal ID 501, original Serial No. 502, creation time and 
date503, reproduction acceptability flag 504 , reproduc- 
tion flag 505, invalidity flag 506, feature quantity infor- 
mation 509 are stored on the basis of a constant de- 
scription standard. 

When there is a sealing / reproduction / invalidity re- 
quirement of a seal mark in the mark sealing manage- 
ment DB210, seal mark sealing management DB210, 
etc. is stored on the basis of a constant description 
standard. 

As for reproduction acceptability flag 504, it is possible 
to control a reproduction possibility frequency as a re- 
production possibility counter. 

Invalidity flag 506 can control time until becoming invalid 
as a valid term. 

[0063] The data of the seal mark sealing management 
DB210 is encoded with the secret key that each seal 
mark certification program 306C manages on employee 



terminal 111 by seal mark processing program 306C of 
employee terminal 111, and the encoded data is embed- 
ded as an entity of a seal mark. The so-called checksum 
that adds considering the code of character data to be 
5 numerical value, or the compression sentence of data 
contents, etc. are used as characteristic information of 
data. 

Document certification information is embedded in the 
circumference part of a seal image other than a block in 

io which the reproduction information of a seal image was 
embedded as shown in 703 of Fig. 7 for example. 
[0064] Fig. 6 is the data example of seal mark repro- 
duction management DB21 1 . When there is a reproduc- 
tion requirement ol a seal mark from employee terminal 

is 111, seal mark reproduction management program 
208B in the seal mark management equipment 101 
stores high-ranking seal mark 601 , serial ID 601 , serial 
No. 802, reproduction date 603, reproduction employee 
ID 504, etc. on the basis ol a constant description stand- 

20 ard. 

The information stored is embedded as an entity of a 
seal mark by a method that is similar to Fig. 5. 
[0065] And. the data that is necessary for document 
certification is not limited to the example of Fig. 5 and 

25 6, and meet information that is necessary as record in- 
formation of the electronic data that can be used when 
acquiring certification of ISO 9001 . 
[0066] Fig. 7 is the image example of a seal image 
and a seal mark. 

30 For example, seal mark reproduction information is em- 
bedded in a seal image like 701. 
At this time, the inside of a seal image is divided into 2 
or more blocks in advance, and the information that 
mean the validity and the original of a seal mark and the 

35 document certification information are respectively em- 
bedded in the specific block. 

For example, dividing some blocks like embedding in- 
formation means validity or original of a seal mark in 
name part and company name part of visible digital wa- 

40 termark like 702, and embedding document certification 
information in the circumference part of a seal image 
like 703 so that embedded information from correspond- 
ing block be automatically extracted when decoding em- 
bedded information in a seal mark using seal mark cer- 

45 tification program 306C, etc. of the employee terminal. 
Although design of individual seal is used as seal design 
example in 701, position seal with date, design like sig- 
nature etc., design indicating reproduction, or company 
name when seal is used for company seal are accept- 

50 able, therefore seal design is not limited to seal design 
example 701. However, it is important to be the mark- 
design that gives it a reliance feeling so that mark design 
can give us the feeling that information is embedded in 
a seal mark because mark design is different from mere 

55 image design 

[0067] Then an operation of the electronic seal mark 
certification system of the present embodiment is ex- 
plained. 
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t0068] Fig. 8 is an example of initial screen image of 
the electronic seal mark reproduction management sys- 
tem that is displayed with seal mark processing program 
306C. 

Initial screen image 800 comprises data display areas 
801 that display necessary digital documents, seal mark 
function display area 802 where the function buttons of 
a seal mark are arranged, and basic function display ar- 
ea 803 where the buttons of a basic function like OK, a 
cancellation and a file are arranged. 
However, initial screen image 800 is the example of ar- 
ranging each area and the screen image is not limited 
to this arrangement. 

[0069] Fig. 9 is the diagram to explain the processing 
flow when sealing seal mark embedded document re- 
production management information on data to be 
sealed with the employee terminal 111. 
And Fig. 10 is the processing screen image that corre- 
sponds to the processing flow of Fig. 9. 
By using this Fig. 10 and above Fig. 9, the above 
processing flow is explained. At first an employee 110 
selects data which the employee wants to seal with file 
button of basic function display area 803, displaying 
(901 ) in data display area 801 , registering (902) seal ID 
501 , seal serial No, 502, creation date 503, reproduction 
acceptability flag 504, reproduction flag 505, invalidity 
flag 506, file name 507, terminal ID 508, and data char- 
acteristic information 509 in the seal mark sealing man- 
agement DB210. 

And while the initial value of reproduction acceptability 
flag 504, reproduction flag 505 and invalidity flag 506 is 
made OK (a reproduction is possible), OFF (original) 
and OFF (validness) by this explanation respectively, it 
.can be changed by employee 110 and system manager 
100. 

[0070] Then, document feature quantity information is 
acquired from the data ; and the contents of seal mark 
sealing management DB are encoded with a secret key 
that is respectively peculiar to each seal mark certifica- 
tion program 306C decided in advance to every employ- 
ee and are embedded in a seal mark (903, 904 and 905). 
[0071] And, when sealing button 1004 of seal mark 
function display area 802 is pressed after attaching a 
public key that is necessary for the decoding and select- 
ing a sealing position, a position that documents set is 
sealed with seal mark sealing program 306C. 
(906,907,908 and 909) 

And even method that is acquired in the network and 
FD, etc. is fine without attaching the public key that is 
peculiar to an employee terminal that is necessary to 
decode information embedded in a seal mark to a seal 
mark. 

[0072] Fig. 11 is a figure to explain data reproduction 
processing flow with a mark seal on employee terminal 
111. 

And Fig. 12 is a processing screen image figure at the 
time of pressing the reproduction button 1203 that cor- 
responds to the processing flow of Fig. 11. By using this 



Fig. 11 and 12, the above processing flow is explained. 
[0073] First employee 110 selects data with a seal 
mark that the employee wants to reproduce with the file 
button that is in basic function display area 803 and in- 

5 dicates (1101) it in digital display area 801. 

Document information to confirm seal mark information 
to confirm information about seal mark sealing after ex- 
tracting (1 1 02) a public key attached to a seal mark from 
the seal mark and decoding a seal mark, and a falsifi- 

10 cation of documents is extracted. (1103 and 1104) 
[0074] Then extract the feature quantity information 
of the data, and compare and check document informa- 
tion unloaded in 1104 (1106). 

[0075] In case it is judged that data is falsified as the 
*5 result of the comparison and check, the error message 
like " this data is changed" is displayed (1107). 
[0076] When it is confirmed that data is not falsified, 
the validity of data is confirmed from invalidity flag 506 
of seal mark reproduction management DB. If a repro- 
ve duction flag of the seal mark serial NO 502 is OFF as a 
means of confirmation, it judges an original, and an in- 
validity flag of serial NO is confirmed at once. 
And then, if the invalidity flag is OFF, it judges valid, and 
it judges an invalid in case of ON. 
2S And if the reproduction flag of the seal mark serial No. 
502 is On, it judges valid, and confirm the invalidity flag 
506 of data when high-ranking seal mark serial NO of 
the serial No 602 equals to serial NO 502 of the seal 
mark sealing management DB 210. 
30 |f it is judged that data is invalid, the message like "this 
data is invalid ",etc. is displayed (1110, 1108) . 
If it is confirmed that the data is valid, the acceptability 
of a reproduction is judged from reproduction accepta- 
bility flag 504, and if it is judged that it is impossible to 
35 reproduce it, the error message that this message can- 
not be reproduced is displayed (1111,1109) 
If the contents of above mentioned error message can 
be changed as far as the similar meaning expresses, 
and any expressing means is fine if it appeals to five 
40 senses of human beings. 

[0077] If confirming that data is not falsified, and con- 
firming validity and reproduction acceptability, it judges 
that the data is reproduction possible, reproduce the da- 
ta and seal mark information, set reproduction flag 505 
45 of reproduced seal mark for ON (already reproduces), 
and register seal ID 501, serial NO 502, creation date 
503, reproduction acceptability flag 504, reproduction 
flag 505, invalidity flag 506, file name 507, terminal ID 
508, and data characteristic quantity information in seal 
50 mark sealing management DB 210 (1114).. 

[0078] And at the same time the information that con- 
cerns a reproduction mark is registered to mark repro- 
duction management DB211. (1115) 
The information that registers comprises a high-ranking 
55 seal mark serial NO 601 , a serial NO 602, reproduction 
date 603, and reproduction employee ID 604. High- 
ranking seal mark serial NO acquires original serial NO 
502 of seal mark, high-ranking seal mark serial NO is 
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hierarchically managed with newly taken serial NO. 
[0079] Then, document information and seal mark in- 
formation are encoded for each for an onginal and for a 
reproduction and are embedded in a seal mark (1116 
and 1117). 5 
[0080] Then attaches a public key for decoding to 
each seal mark for an original and for a reproduction, 
and seals documents. (1119) 

By the above processing, data with seal mark has been 
reproduced by creating two types of data with seal mark 
for an original and for a reproduction. (1202) 
[0081] And as for the position which seal mark is 
sealed on data, either the same place as position sealed 
in step 1101 or a position that employee 110 specified 
a seal mark as data again newly is fine. 
And while only one data is reproduced by this explana- 
tion, several data can be reproduced once. 
[0082] Fig. 13 is a figure to explain invalidity process- 
ing flow on employee terminal 111 . 
And Fig. 14 is an example of processing screen image 
at the time of pressing of invalidity button 1403 that cor- 
responds to the processing flow of Fig. 1 3. 
[0083] When invalidity button 1 403 is pressed first on 
an empbyee terminal, the screen image of 1401 in Fig. 
1 4 appears. 

And the processing from the data display selected to the 
comparison of document information is omitted because 
it is the same as above description. (1 301 , 1 302 , 1 303 , 
13041305, 1306 and 1307) 

[0084] Then reproduction information is confirmed to 
confirm an original of the data. 

As for confirmation of reproduction information, repro- 
duction flag 505 is confirmed, and the error message 
like ' this data can not be processed for invalidity be- 
cause this data is reproduced." is displayed if the seal 
mark is a reproduction. (1309,1308) 
If this seal mark is an original, invalidity flag of the seal 
mark sealing management DB with respect to the seal 
mark is set at ON, that is invalid, (1310), document in- 
formation and seal mark information is encoded, they 
are embedded, and they are sealed on data attaching 
with a public key. 

[0085] While the process changing valid data to 
invalid data is explained by above description, a process 
changing invalid data to valid data can be fine. And as 
the means that invalidity flag 506 is set at ON, that is, 
invalidity, seal mark has a valid deadline, and an inva- 
lidity flag can be ON (invalidity) by a timer. 
Invalidity visually is fine changing GUI as for the seal 
mark that seals data that became an invalidity (1404). 
[0086] Fig. 15 is a figure to explain document infor- 
mation confirmation processing flow on employee ter- 
minal 111. 

And Fig. 16 is the example of the processing screen im- 
age that corresponds to the processing flow of Fig. 1 5. 
[0087] At first when document information button 
1 603 is pressed on employee terminal 111, data select- 
ed is indicated. 



The processing from the data display to the comparison 

/check of document characteristic quantity information 

is omitted because it is the same as above description 

(1501, 1502, 1503, 1504, 1505, 1506, 1507). 

[0088] If it is confirmed that the data is not falsified, 

the contents of reproduction flag 505 is confirmed to 

confirm that the data is the original or the reproduction 

from the seal mark (1509) 

Then the validity of the data is confirmed. 

If a reproduction flag of the seal mark serial NO502 is 

OFF as a means of confirming the validity of the data, 

data is judged as an original and an invalidity flag of the 

serial No at once is confirmed. 

And then if the invalidity flag is OFF, the data is judged 

as valid, and the data is judged as an invalid in case of 

ON. 

And if a reproduction flag of the seal mark serial NO502 
is ON, the data is judged as reproduction, invalidity flag 
at the time of "high-ranking seal mark serial NO of serial 
NO 602 = serial NO 502 of the seal mark sealing man- 
agement DB 210 ' is confirmed. 
[0089] When the validity of the data can be confirmed, 
confirmation result 1604 is displayed. (1510, 1511 and 
1602) 

[0090] By attaching a mark that has seal image design 
according to a present invention as it was explained in 
the above description to data and embedding document 
information and seal mark informatbn in this mark itself, 
the mechanism confirming the probability of the infor- 
matbn to some degree at glance can be provided. 
And the mechanism that can use the electronic seal of 
design that is similar to an employment mark, a recog- 
nition seal, a sign, a corporate seal, etc. that are used 
in the various scenes of actual world on a network is 
provided because in the present invention seal image 
design can be created. 

[0091] A document management method of being 
able to confirm the probability of the informatbn to some 
degree with glance can be provided by attaching the 
mark that has seal image design to data according to a 
present invention and embedding document information 
and seal mark information in this mark itself. 



1. A document management apparatus comprising : 
at least one terminal, 

at least one management equipment that man- 
ages a mark which represents seal or signature 
used in said terminal, said terminal and said 
management 

equipment are mutually coupled through a 
communication network, 
said mark management equipment includes 
means for registering and managing such nec- 
essary information as to confirm original data 
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and reproduction from original in case a change 
requirement is received, 
said terminal includes means for embedding 
necessary information in said mark to confirm 
original of data and validity of data, means for 
being able to seal data on said mark, means for 
controlling validity of data, means for being able 
to confirm either original of data or reproduction 
of data or both original ol data and reproduction 
of data. 



of data in said mark, and function of confirming ei- 
ther original of data or validity of data or both original 
of data and validity of data. 



2. A document management apparatus according to 
claim 1, 

said mark management equipment includes 
means for hierarchically managing the original mark is 
sealed on a data original and reproduction marks 
sealed on a reproduction of data. 

3. A document management apparatus according to 
claim 1, said document management apparatus 20 
generates a visible seal mark which includes means 

for dividing image data into more than 2 blocks, add- 
ing necessary information to confirm original of data 
and validity of data and confirm that said document 
is not falsified to said block in which image data is 25 
different from, and confirming either original of data 
or validity of data or both original of data and validity 
of data. 



4. A document management apparatus according to 30 
claim 1, said document management apparatus 
generates a visible seal mark which includes means 

for confirming original of data and validity of data 
using a visible watermark and invisible watermark. 

35 

5. A document management apparatus according to 
claim 1, embedding encrypted necessary informa- 
tion to manage original of data, validity of data, and 
information that concerns sealing and reproduction 

in said mark in said mark management equipment, 40 
and attaching a necessary public key to a seal mark 
to decrypt said encrypted necessary information, 

whereby confirming original and validity on a 
network in spite of intranet, and judging whether re- 
production is possible or not. 45 

6. A electronic seal reproduction management system 
according to claim 1 , comprising ; 

reproduction of data with a mark is capable, so 
information is succeeded from original mark to 
reproduction mark in said terminal. 

7. A document management apparatus according to 
claim 1, 55 

An interface is provided in said terminal, the 
interface includes function of embedding necessary 
information to confirm original of data and validity 
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mark of seal image design that employee 110 created 
and transmitted. 
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ABSTRACT : PROBLEM TO BE SOLVED: To distribute electronic data in a visualized form by applying 

special logic arithmetic operation to the electronic data being an object of distribution/ 
exchange such as an encryption key through the use of electronic data of an icon having a 
meaningful pattern. 

SOLUTION: Primitive data 1 such as an encryption key and an electronic signature are 
arranged in 8'8 bits to form an 'icon of primitive data'. Significant data 6 are arranged in 
848 bits and when the data are outputted as an image of 'icon of likeness' having a pattern 
of a person's face. A replacement processing device 4 gives the image of 'icon of likeness' 
to an image output device as a 1st plane 2 for ican display. Moreover, 'icon of inverse 
element' obtained by exclusive OR between 'icon of primitive data' and the image of 'icon 
of likeness' is given to the image output device as a 2nd plane 3. A green attribute is given 
to the 1 st plane 2 and transparent attribute is given to the 2nd plane 3 to provide an output 
of the image of 'icon of likeness' in green singly. 
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